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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

1-24. (Cancelled) 

25. (Previously Presented) A method of managing cookies in a data 
processing system, said method comprising the steps of: 

a user agent requesting a resource associated with a cookie from a content 
provider; 

receiving a privacy policy associated with said cookie; and, 

said user agent transmitting, in response to reception of said privacy policy 
associated with said cookie, a cookie-policy receipt to said content provider, said 
cookie-policy receipt based only on a user decision, said user decision specifying 
whether a user associated with said user agent accepts that said content provider 
provides said cookie to user equipment associated with said user agent. 

26. (Previously Presented) The method according to claim 25, further 
comprising the step of including said cookie-policy receipt in a resource fetch message 
transmitted from said user agent to said content provider. 

27. (Previously Presented) The method according to claim 25, wherein 
said user decision is determined by: 

said user agent comparing said privacy policy with a user preference, said user 
preference specifying a cookie privacy policy accepted by said user; and 

said user agent generating said cookie-policy receipt based on said comparison. 
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28. (Previously Presented) The method according to claim 27, wherein, if 
said received privacy policy does not match said user preference, said method further 
comprising the steps of: 

said user agent presenting said received privacy policy for said user on said user 
equipment; and 

said user agent generating, in response to a user-input signal, said cookie-policy 
receipt. 

29. (Previously Presented) The method according to claim 25, wherein 
said user decision is determined by 

said user agent presenting said received privacy policy for said user on said user 
equipment; and 

said user agent generating, in response to a user-input signal, said cookie-policy 
receipt. 

30. (Previously Presented) The method according to claim 25, further 
comprising the step of authenticating said cookie-policy receipt with an authentication 
key associated with said user agent. 

31. (Previously Presented) The method according to claim 25, wherein, if 
said cookie-policy receipt specifies that said user does not accept that said content 
provider provides said cookie to said user equipment, said method comprising the step 
of removing said cookie associated with said requested resource from a storage 
memory in said user equipment. 

32. (Previously Presented) The method according to claim 25, wherein, if 
said cookie-policy receipt specifies that said user does not accept that said content 
provider provides said cookie to said user equipment, said method comprising the step 
of ignoring a cookie request command transmitted from said content provider to said 
user agent. 
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33. (Previously Presented) A method of providing cookies in a data 
processing system, wherein a user agent requests a resource associated with a cookie 
from a content provider, said method comprising the steps of: 

receiving a resource request, wherein the resource is associated with a cookie from 
said content provider; 

transmitting a privacy policy associated with said cookie to said user agent; 

receiving a cookie-policy receipt based only on a user decision from said user 
agent; and, 

said content provider providing, in response to reception of said cookie-policy 
receipt from said user agent, said cookie to user equipment associated with said user 
agent if said cookie-policy receipt specifies that a user associated with said user agent 
accepts that said content provider provides said cookie to said user equipment. 

34. (Previously Presented) The method according to claim 33, wherein 
said cookie-policy receipt is received in a resource fetch message transmitted from said 
user agent. 

35. (Previously Presented) The method according to claim 33, wherein, if 
said cookie-policy receipt specifies that said user accepts that said content provider 
provides said cookie to said user equipment, said method comprising the step of 
providing said cookie-associated resource. 

36. (Previously Presented) The method according to claim 33, 
wherein said cookie-policy receipt is generated based on a comparison between said 
privacy policy and user preference that specifies a cookie privacy policy accepted by 
said user 
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37. (Previously Presented) A data processing system for requesting a 
resource associated with a cookie from a content provider, said data processing system 
comprising: 

a user agent, said user agent comprising: 

means for receiving a privacy policy associated with said cookie; and, 
means for transmitting, in response to reception of said privacy policy associated 
with said cookie, a cookie-policy receipt to said content provider, said cookie-policy 
receipt based only on a user decision, said user decision specifying whether a user 
associated with said user agent accepts that said content provider provides said cookie 
to user equipment associated with said user agent. 

38. (Previously Presented) The data processing system according to claim 
37, wherein said transmitting means includes said cookie-policy receipt in a resource 
fetch message transmitted to said content provider. 

39. (Previously Presented) The data processing system according to claim 
37, comprising means for determining the user decision, said means for determining 
further comprising: 

means for comparing said privacy policy with a user preference, said user 
preference specifying a cookie privacy policy accepted by said user; and, 

means for generating, connected to said comparing means, said cookie-policy 
receipt as a function of said comparing of said privacy policy with said user preference. 

40. (Previously Presented) The data processing system according to claim 
39, further comprising means for presenting said received privacy policy for said user on 
said user equipment if said privacy policy does not match said user preference, said 
generating means being adapted for generating said cookie-policy receipt in response 
to a user input signal. 
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41 . (Previously Presented) The data processing system according to claim 
37, comprising means for determining the user decision, said means for determining 
further comprising: 

means for presenting said privacy policy for said user on said user equipment; 

and 

means for generating said cookie-policy receipt in response to a user input 

signal. 

42. (Previously Presented) The data processing system according to claim 
37, further comprising means for authenticating said cookie-policy receipt with an 
authentication key associated with said user agent. 

43. (Previously Presented) The data processing system according to claim 
37, further comprising means for removing a cookie associated with said requested 
resource from a storage in said user equipment if said cookie-policy receipt specifies 
that said user does not accept that said content provider provides said cookie to said 
user equipment. 

44. (Previously Presented) A content provider apparatus adapted for 
providing a requested resource associated with a cookie to a user agent in a data 
processing system, said content provider apparatus comprising: 

means for receiving a resource request from said user agent; 

means for transmitting, in response to said resource request from said user 
agent, a privacy policy associated with said cookie to said user agent; 

means for receiving a cookie-policy receipt based only on a user decision; and, 

means for providing, in response to said cookie-policy receipt transmitted from 
said user agent, said cookie to said user equipment associated with said user agent if 
said cookie-policy receipt specifies that a user associated with said user agent accepts 
that said content provider provides said cookie to said user equipment 
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45. (Previously Presented) The content provider apparatus according to 
claim 44, wherein said cookie-policy receipt is received in a resource fetch message 
transmitted from said user agent. 

46. (Previously Presented) The content provider apparatus according to 
claim 44, further comprising means for providing said cookie-associated resource if said 
cookie-policy receipt specifies that said user accepts that said content provider provides 
said cookie to said user equipment. 

47. (Previously Presented) The content provider apparatus according to 
claim 44, wherein said cookie-policy receipt is generated based on a comparison 
between said privacy policy and user preference that specifies a cookie privacy policy 
accepted by said user. 

48. (Cancelled). 
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